LOCH LOMOND GROUP CUSTOMER PRIVACY NOTICE

Loch Lomond Distillers Limited (“Loch Lomond Group”, “we”, “us” and “our”) is committed to protecting and respecting your privacy. This Notice explains how we collect, use and share your personal data, including in connection with your use of the following websites (our “Websites”):

www.lochlomondgroup.com
www.benlomondgin.com
www.glenscotia.com
www.lochlomondwhiskies.com
www.littlemilldistillery.com
glensvodka.com
www.highcomm.co.uk

When you visit our Websites or fill in forms on our Website or elsewhere, including at our shops and distilleries and at events and festivals:

• details of your visits to our Websites and the resources that you access, including Internet Protocol (IP) address, traffic data, location data, weblog statistics and other communication data; and
• personal details that you provide by filling in forms on our Websites or elsewhere, such as when you register to receive information such as a newsletter or contact us via the contact us page, including your name, e-mail, telephone number, postal and billing address, date of birth and location data (including country and nearest city).

When you contact us or we contact you or you take part in competitions, surveys or reviews about our products:

• information that you provide about yourself anytime you contact us about our products (for example, your name, date of birth, contact details and transaction information relating to any purchase of our products), including by phone, email, post, through social media or via a third party seller or distributor of our products;
• details of emails and other communications we send to you that you open, including any links that you click on in those communications;
• your feedback and contributions to surveys or reviews; and
• information that you provide by filling in forms on our Websites or elsewhere, such as when you register to receive information such as a newsletter or contact us via the contact us page including your name, e-mail, telephone number, postal and billing address, date of birth; and location data (including country and nearest city).

• to service your needs including fulfilling orders of any products or samples, including delivery of those products or samples;
• to process and keep records of payments you make in relation to our products or tours;
• to promote and market our products and services, if you have indicated that you would like to receive marketing from us, to send you newsletters and other marketing materials including details of special offers, promotions, events, distillery tours, festivals and product launches;
• to run competitions in accordance with the relevant terms and conditions; to notify winning participants and arrange delivery of prizes; to notify competition participants who request details of winning entries of the name and geographical location of the prize winners;

We use your personal data on the following basis:

• with your consent, where you have indicated that you would like to receive marketing from us;
• in order to fulfill a contract we have with you for the sale of our products;
• for the legitimate interests of the Loch Lomond Group, being the purposes set out in the “How do we use your personal data?” section above; and
• to comply with certain legal and regulatory obligations of the Loch Lomond Group.

We may share certain of your personal data with:

• members of the Loch Lomond Group of companies;
• marketing agencies that provide services to the Loch Lomond Group;
• our customers (including wholesalers, distributors and supermarkets), who promote and sell our products; and
• delivery companies who provide delivery fulfillment services.

Your personal data may be processed by Loch Lomond Group, its affiliated companies and those other parties described above, outside the European Economic Area. Where the European Commission has not issued an adequacy decision in relation to the jurisdiction where your personal data is processed, we will ensure that there are adequate mechanisms in place to protect your personal data in accordance with applicable data protection and privacy law.

We adopt a variety of internal information security measures to keep your personal data safe, including to protect it from unauthorised access, use, disclosure, alteration or distribution. In addition, our IT providers have adopted high information security standards. Where Loch Lomond Group retains a third-party service provider, that provider will be carefully selected in accordance with Loch Lomond Group’s policies and procedures.

We will always keep your personal data for the period required by law. We will also keep your personal data where we need to do so in connection with legal action or an investigation involving Loch Lomond Group. Otherwise, we will only keep your personal data for the period necessary to fulfill the purposes outlined above and in any event for no more than seven years thereafter.

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is also used to track visitor use of our Websites and to compile statistical reports on website activity.

We use cookies to collect personal information to enable us to reflect our users' interests and by noting who has seen which pages (including click through from emails), how frequently particular pages are visited and to enable us to determine the most popular areas of our Website.

We may use cookies to enrich your experience of using our Website by allowing us to tailor what you see to what we have learned about your preferences during your visits to our Website. Sometimes we may use services of third parties and they may use cookies on our behalf in order to provide their services.

You may be entitled to:

• request the correction of your personal data;
• request the deletion of your personal data in certain circumstances, for example where your personal data is no longer required for the purposes set out in the “How do we use your personal data?” section above;
• request the restriction of the processing of your personal data in certain circumstances;
• object to the processing of your personal data. In this case, we will no longer process your personal data unless there are compelling legitimate grounds for doing so or where it is necessary in relation to a legal claim;
• ask Loch Lomond Group about the processing of your personal data and to be provided with a copy of your personal data; and
• request receipt or transmission to another organisation, in a machine-readable form, of the personal data that you have provided to Loch Lomond Group.

If you have questions about the processing of your personal data, or need additional information, please contact dataprotection@lochlomondgroup.com

Loch Lomond Distillers Limited is the controller of your personal data.